Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-0640 | critical | 9.8 | No | A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a man... | 2026-10-26 |
| CVE-2026-0607 | critical | 9.8 | No | A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminViewSongs.php... | 2026-10-26 |
| CVE-2026-0606 | critical | 9.8 | No | A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Front... | 2026-10-26 |
| CVE-2026-0605 | critical | 9.8 | No | A security vulnerability has been detected in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionalit... | 2026-10-26 |
| CVE-2026-0597 | critical | 9.8 | No | A flaw has been found in Campcodes Supplier Management System 1.0. Affected by this issue is some unknown functionality of the file /retaile... | 2026-10-26 |
| CVE-2026-0592 | critical | 9.8 | No | A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This affects an unknown function of the file /ha... | 2026-10-26 |
| CVE-2026-0591 | critical | 9.8 | No | A vulnerability was identified in code-projects Online Product Reservation System 1.0. The impacted element is an unknown function of the fi... | 2026-10-26 |
| CVE-2026-0590 | critical | 9.8 | No | A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the fi... | 2026-10-26 |
| CVE-2026-0585 | critical | 9.8 | No | A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the fi... | 2026-10-26 |
| CVE-2026-0546 | critical | 9.8 | No | A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the file search.php. This... | 2026-10-26 |
| CVE-2025-15705 | low | 3.5 | No | The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form name, allowing users with access to the form... | 2026-10-26 |
| CVE-2026-97313 | high | 7.5 | No | A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assert... | 2026-10-26 |
| CVE-2026-96888 | high | 7.5 | No | A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while pro... | 2026-10-26 |
| CVE-2026-94300 | high | 8.1 | No | Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP mes... | 2026-10-26 |
| CVE-2026-90484 | medium | 6.5 | No | The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet... | 2026-10-26 |
| CVE-2026-82953 | medium | 5.3 | No | NULL pointer dereference in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to c... | 2026-10-26 |
| CVE-2026-19630 | high | 7.5 | No | In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by... | 2026-10-26 |
| CVE-2026-56386 | high | 7.5 | No | Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to... | 2026-10-26 |
| CVE-2025-61560 | high | 8.1 | No | A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass ra... | 2026-10-26 |
| CVE-2025-70522 | high | 8.8 | No | The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing r... | 2026-10-26 |